3 ms·
Enterprise profiles offer complete control over an iPhone in iOS7, including bypassing password, installing apps and so on. In theory one needs to install a pro
by blub 13y ago
Enterprise profiles offer complete control over an iPhone in iOS7, including bypassing password, installing apps and so on. In theory one needs to install a profile by hand, but I don't see why it wouldn't be possible to do it remotely with the right vulnerabilities. Some devices can come from the factory with an ID that auto-enrolls them with an EDM profile, including after OS reinstalls. I don't remember if Apple can push profiles, but I think it can.
More info on Zdziarski's blog.
Anyway, all devices with centralized managment like Android, iPhone, Blackberry can't be secured IMHO against such a capable adversary. When an actor can push stuff to the device it's hopeless.
- RyanZAG 13y agoYes, definitely. This is what I was trying to get at - the idea that they still need exploits as other comments are talking about is incredibly unlikely. With things like iCloud, centralized device management, remotely installable admin certificates, google play services, etc. it is very unlikely that the NSA is even considering using any kind of exploit anymore. When the NSA wants to use your phone, you don't have to worry about them exploiting something. A special packet will come down using one of the many available 'official backdoors' on your device to redirect your device to an NSA server.
- comex 13y agoThis is FUD. Do you have any evidence that iOS allows any Apple server to get some kind of full control without asking permission and without using an exploit? I suppose that if you are restoring from an iCloud backup and Apple has been convinced to allow the NSA to modify that backup, some kind of MDM stuff could be enabled, but this is limited and detectable. Otherwise, it may be possible, but you have not provided any evidence.